Privacy Policy — RegattaLens and the RegattaLens Tracker app

Last updated: July 25, 2026

What we collect

• Account: email address, name (if provided), password hash.
• Tracking telemetry (only while tracking is switched on in the app): GPS coordinates, speed, course, GPS accuracy, battery level, timestamps.

Why

• Live broadcast of boat positions during a race, and the race archive with results.
• Moderation: a club administrator sees registered users in order to approve their phones as trackers and assign them to boats.
• Battery level lets the race committee watch tracker health.

Who can see the data

• A boat's position during and after a race is visible to the organiser and to viewers of the broadcast — as sporting information about the boat, not as personal data.
• Email and name are visible to club administrators.
• Data is never sold and never shared with third parties for advertising.

When location is transmitted

Only after you tap “Start tracking” and until you tap “Stop” (or sign out). Transmission continues while the app is in the background and the screen is off — the app discloses this separately before the first start and shows a persistent notification while tracking is active. Outside tracking, location is not collected.

What stays in your browser, and where requests go

This site uses no cookies — neither its own nor third-party ones. There are no analytics counters and no advertising trackers on it.

• Local browser storage keeps only what is necessary: your sign-in (session tokens), the interface language you picked, the boat you chose to follow and — in the web tracker — its token together with the queue of positions not yet sent. All of it can be cleared from your browser at any time.
• Map tiles are loaded from third-party servers: CARTO and OpenStreetMap, Esri (satellite imagery) and OpenSeaMap (seamarks). Opening a map means your browser contacts them directly, so they see your IP address and the map square requested. They set no cookies.
• The wind forecast is requested by our server, not by your browser: your IP address never reaches the weather provider.

Retention and deletion

• You can delete your account in the app (Profile → “Delete account”) or on request: instructions. The account, its sessions and tracker access are deleted.
• Tracks of past races remain in the regatta archive as the boat's sporting result and are not linked to the deleted account.

Security

Data is transmitted over HTTPS; passwords are stored as hashes (bcrypt); tracker access is limited to a personal token that an administrator can revoke.